@bitkyc08/opencodex 2.49.0 → 2.50.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (69) hide show
  1. package/AGENTS_INSTALL.md +9 -1
  2. package/README.md +3 -0
  3. package/gui/dist/assets/index-C39tnjXO.js +115 -0
  4. package/gui/dist/index.html +1 -1
  5. package/package.json +1 -1
  6. package/src/claude/inbound.ts +17 -5
  7. package/src/cli/account-api.ts +18 -3
  8. package/src/cli/account-auth.ts +8 -1
  9. package/src/cli/account-extended.ts +2 -1
  10. package/src/cli/account.ts +1 -0
  11. package/src/cli/capabilities.ts +15 -1
  12. package/src/cli/index.ts +5 -1
  13. package/src/cli/models-runtime.ts +8 -3
  14. package/src/cli/observe.ts +13 -3
  15. package/src/clients/config-export/zcode.ts +24 -0
  16. package/src/codex/account-runtime-state.ts +6 -1
  17. package/src/codex/account-store.ts +72 -9
  18. package/src/codex/account-usability.ts +3 -2
  19. package/src/codex/auth-api.ts +107 -23
  20. package/src/codex/auth-context.ts +21 -0
  21. package/src/codex/catalog/parsing.ts +23 -0
  22. package/src/codex/catalog/provider-fetch.ts +71 -2
  23. package/src/codex/catalog/sync.ts +14 -0
  24. package/src/codex/inject.ts +3 -2
  25. package/src/codex/quota-auto-refresh.ts +6 -1
  26. package/src/codex/quota.ts +54 -8
  27. package/src/combos/index.ts +2 -0
  28. package/src/combos/resolve.ts +52 -0
  29. package/src/config.ts +58 -0
  30. package/src/generated/compatibility-version.json +72 -60
  31. package/src/lib/errors.ts +8 -0
  32. package/src/lib/privacy.ts +25 -0
  33. package/src/oauth/health.ts +47 -12
  34. package/src/oauth/index.ts +46 -8
  35. package/src/oauth/token-guardian.ts +32 -6
  36. package/src/providers/google-ai-studio-model-discovery.ts +74 -0
  37. package/src/providers/opencode-zen-rate-limit.ts +75 -0
  38. package/src/providers/quota.ts +15 -0
  39. package/src/providers/registry.ts +1 -1
  40. package/src/server/auth-cors.ts +6 -0
  41. package/src/server/chat-completions.ts +4 -4
  42. package/src/server/chat-native.ts +10 -1
  43. package/src/server/claude-messages.ts +5 -5
  44. package/src/server/images.ts +2 -2
  45. package/src/server/index.ts +25 -2
  46. package/src/server/management/logs-usage-routes.ts +4 -1
  47. package/src/server/management/model-rows.ts +16 -1
  48. package/src/server/management/oauth-account-routes.ts +6 -2
  49. package/src/server/management/provider-routes.ts +9 -2
  50. package/src/server/management/request-history-routes.ts +4 -2
  51. package/src/server/management/route-registry.ts +5 -4
  52. package/src/server/management/shared.ts +66 -3
  53. package/src/server/management-api.ts +1 -1
  54. package/src/server/request-decompress.ts +91 -3
  55. package/src/server/request-log.ts +10 -0
  56. package/src/server/responses/codex-ws-wire.ts +1 -1
  57. package/src/server/responses/compact.ts +8 -2
  58. package/src/server/responses/context-overflow.ts +11 -0
  59. package/src/server/responses/core.ts +144 -38
  60. package/src/server/responses/policy-fallback.ts +6 -2
  61. package/src/server/search.ts +2 -2
  62. package/src/service.ts +92 -7
  63. package/src/types/accounts.ts +18 -0
  64. package/src/types/config.ts +36 -0
  65. package/src/types/provider.ts +56 -0
  66. package/src/types.ts +4 -0
  67. package/src/web-search/ollama-executor.ts +127 -0
  68. package/src/web-search/passthrough-bridge.ts +761 -0
  69. package/gui/dist/assets/index-BtyONQrZ.js +0 -115
package/AGENTS_INSTALL.md CHANGED
@@ -22,7 +22,7 @@ install or operations task authorizes, and an agent must never perform or
22
22
  auto-answer them — even when the surrounding task is approved, even when the
23
23
  credential is sitting right there.
24
24
 
25
- The current one is **starring the repository on GitHub**.
25
+ The following instructions concern **starring the repository on GitHub**.
26
26
 
27
27
  ### Do not
28
28
 
@@ -72,6 +72,14 @@ agent-driven callers regardless:
72
72
  Regression coverage: `tests/server/startup-prompt.test.ts`,
73
73
  `tests/cli/agent-driven.test.ts`, `tests/server/sidebar-routes.test.ts`.
74
74
 
75
+ ### Pending Codex account validation
76
+
77
+ Completing deferred account validation spends model quota. Only a human's
78
+ dashboard **Refresh quotas** action authorizes it. CLI and raw-admin refreshes
79
+ read usage without validating pending accounts. Relay the dashboard recovery
80
+ instruction to the user; do not mint a GUI session or call the provider directly
81
+ to work around this boundary. This also applies when operating a headless host.
82
+
75
83
  If a future action spends the user's identity, credits, or reputation, gate it
76
84
  the same way rather than relying on a prompt an agent can answer, and document
77
85
  it here.
package/README.md CHANGED
@@ -368,6 +368,9 @@ Maintainer source-of-truth notes live under [`structure/`](./structure), contrib
368
368
  Report undisclosed vulnerabilities privately through
369
369
  [GitHub private vulnerability reporting](https://github.com/lidge-jun/opencodex/security/advisories/new),
370
370
  not a public issue.
371
+ That form is the only technical channel — there is no security email. Follow-ups stay in the
372
+ private report itself; a public issue may carry coordination only, never vulnerability details.
373
+ Acknowledging a report is not the same as triaging it, and no first-response target is promised.
371
374
 
372
375
  ## Development
373
376